Blog Post

Core Infrastructure and Security Blog
11 MIN READ

Use Azure Logic Apps to Notify of Pending AAD Application Client Secrets and Certificate Expirations

Russ_Rimmerman's avatar
Russ_Rimmerman
Icon for Microsoft rankMicrosoft
Nov 29, 2021

Managing the expiration dates of client secrets and certificates for Azure Active Directory (AAD) applications can be challenging, especially for organizations with numerous applications. To address this, leveraging Azure Logic Apps offers an automated solution to proactively monitor and notify administrators and application owners of impending expirations. This approach enhances security and ensures uninterrupted application functionality by providing timely alerts for necessary credential updates.

Disclaimer The sample scripts are not supported under any Microsoft standard support program or service. The sample scripts are provided AS IS without warranty of any kind. Microsoft further disclai...
RussRimmerman_0-1638198579862.png
Updated Jan 29, 2025
Version 5.0
RussRimmerman
Raka74's avatar
Raka74
Copper Contributor
Feb 16, 2023

@Raka74there is no reason to be afraid 🙂
I tested this, and if you're creating a new secret without any name then the name is generated automatically, you can try it.

 

 

Well Vitalii_Kopach 

 

I think It would be possible to filter these out somehow then - it shouldn't be too difficult since 'passwordCredential' that contains the secret displayname is already available. (I think)

 

Maybe by using a similar thing I did - but instead of using tags in the (In case of no owner ) condition add (OR) something like PasswordCredential contains 'null' to go the left and then and  then create another condition thereunder if passwordCredential contains 'null' do not add to string variable.

 

Look at step 5 and 6 of my post above.

 

Russ_Rimmerman  Could work right?